First published: Tue Apr 25 2017(Updated: )
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Credit: cve-coordination@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome | <=57.0.2987.75 | |
macOS | ||
Linux Kernel | ||
Microsoft Windows Operating System | ||
Google Chrome | <=57.0.2987.100 | |
Android |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-5048 is classified as a high-severity vulnerability due to the potential for a remote attacker to exploit it.
To fix CVE-2017-5048, update Google Chrome to version 57.0.2987.98 or later.
CVE-2017-5048 affects Google Chrome on Mac, Windows, and Linux operating systems.
Yes, CVE-2017-5048 could allow a remote attacker to perform an out of bounds memory write, potentially compromising data.
CVE-2017-5048 is an integer overflow vulnerability in the ChunkDemuxer of FFmpeg used in Google Chrome.